Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/413/f9-H_8kha19qfyTLoroOOcxQ5Ng.roa
File: f9-H_8kha19qfyTLoroOOcxQ5Ng.roa (raw, json)
Hash identifier: MHeBV1EDVobWodpdjGW8iLOS92gQFuajr5NN2bctiJM=
Subject key identifier: 7F:DF:87:FF:C9:21:6B:5F:6A:7F:24:CB:A2:BA:0E:39:CC:50:E4:D8
Certificate issuer: /CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Certificate serial: 14EB
Authority key identifier: C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/f9-H_8kha19qfyTLoroOOcxQ5Ng.roa
Signing time: Sat 13 Sep 2025 03:03:27 +0000
ROA not before: Sat 13 Sep 2025 03:03:27 +0000
ROA not after: Mon 03 Aug 2026 08:44:40 +0000
asID: 62387
IP address blocks: 101.232.44.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5355 (0x14eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C65BF57BDC9B5BE7D97E0D65AA4222B1EFAABEAA
Validity
Not Before: Sep 13 03:03:27 2025 GMT
Not After : Aug 3 08:44:40 2026 GMT
Subject: CN=7FDF87FFC9216B5F6A7F24CBA2BA0E39CC50E4D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d9:ad:ec:6f:09:52:e0:36:b2:37:f4:d1:f6:
d5:37:2f:82:bd:fe:9c:19:4e:3a:43:2c:ac:af:dd:
5f:7d:4a:3e:3a:2c:0c:42:95:20:c9:fb:ed:25:64:
48:92:c7:9f:b9:d5:ca:d1:3d:2e:8f:b4:97:52:b6:
35:3d:c3:02:8a:b8:e3:a0:2e:7b:bb:9f:30:79:26:
2f:9a:68:c5:ff:36:a8:25:1f:d3:88:ec:7c:b4:08:
15:ec:af:b2:3d:ac:2c:b7:e0:0b:d3:7c:2a:80:6b:
08:96:1a:76:56:fc:8e:04:24:fe:e1:b2:03:66:4b:
dd:a6:90:55:cb:66:3a:88:62:ad:70:58:13:3e:53:
5b:5f:2e:83:e1:0d:53:c4:da:3e:f6:13:86:da:f8:
44:ef:91:c8:6f:5b:7b:e4:b7:23:a6:28:8b:55:f5:
d1:66:39:ea:30:29:59:3b:38:db:e4:0c:15:89:56:
17:e0:2f:eb:e5:0b:01:45:0e:28:80:12:59:91:08:
47:30:42:04:d3:0c:5e:30:d6:df:d6:78:d1:7f:48:
52:04:37:ee:38:54:30:e4:7b:b7:9d:56:34:9e:cb:
b3:ea:6e:d1:04:7a:a7:d4:e5:d8:6d:95:d8:5f:e8:
5d:6c:07:1d:08:fb:a6:eb:20:b1:29:78:53:b4:d7:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:87:FF:C9:21:6B:5F:6A:7F:24:CB:A2:BA:0E:39:CC:50:E4:D8
X509v3 Authority Key Identifier:
keyid:C6:5B:F5:7B:DC:9B:5B:E7:D9:7E:0D:65:AA:42:22:B1:EF:AA:BE:AA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/xlv1e9ybW-fZfg1lqkIise-qvqo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/xlv1e9ybW-fZfg1lqkIise-qvqo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/413/f9-H_8kha19qfyTLoroOOcxQ5Ng.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.232.44.0/22
Signature Algorithm: sha256WithRSAEncryption
62:80:5d:1a:fd:50:23:18:e5:39:24:fd:1c:39:12:21:81:5b:
92:d5:53:58:24:c9:79:3c:aa:92:25:37:c7:ed:af:76:f1:ba:
b8:68:18:82:0f:7d:1c:f3:ae:2b:07:6a:31:4d:36:f8:2b:cb:
23:c1:94:b9:3e:60:dc:3b:96:29:79:b7:00:05:7e:7e:39:90:
69:c1:aa:9a:b7:fd:58:28:fa:7d:1e:cd:ff:f8:4a:2c:2b:b3:
ac:69:b4:ab:26:ed:ae:9b:aa:20:87:10:11:cc:44:39:45:9d:
00:1d:e7:89:eb:ed:b7:8c:b3:b7:f8:6d:22:48:e6:c4:0d:14:
ac:98:7c:87:5a:ab:f9:fa:36:43:c8:f0:f4:7b:46:ba:62:d2:
62:d4:f6:ac:a0:b3:e1:3d:9a:79:20:9b:91:48:aa:d7:fb:46:
c8:0a:71:cf:88:fd:0d:a8:9d:8e:7e:30:35:17:57:bf:75:84:
fd:2d:62:40:f5:aa:55:49:dd:c0:11:2f:1e:a6:e2:58:3f:f5:
a4:94:9a:8b:c4:80:d9:7e:2d:9b:a3:f1:f4:26:78:2a:53:9f:
9b:18:a1:3a:5f:c6:b4:89:5c:9b:98:65:b1:52:84:37:bb:60:
20:d2:b9:19:4c:5c:13:14:f9:34:cd:04:8a:71:da:54:45:5f:
8e:38:62:20
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICFOswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzY1
QkY1N0JEQzlCNUJFN0Q5N0UwRDY1QUE0MjIyQjFFRkFBQkVBQTAeFw0yNTA5MTMw
MzAzMjdaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdGREY4N0ZGQzkyMTZC
NUY2QTdGMjRDQkEyQkEwRTM5Q0M1MEU0RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY2a3sbwlS4DayN/TR9tU3L4K9/pwZTjpDLKyv3V99Sj46LAxC
lSDJ++0lZEiSx5+51crRPS6PtJdStjU9wwKKuOOgLnu7nzB5Ji+aaMX/NqglH9OI
7Hy0CBXsr7I9rCy34AvTfCqAawiWGnZW/I4EJP7hsgNmS92mkFXLZjqIYq1wWBM+
U1tfLoPhDVPE2j72E4ba+ETvkchvW3vktyOmKItV9dFmOeowKVk7ONvkDBWJVhfg
L+vlCwFFDiiAElmRCEcwQgTTDF4w1t/WeNF/SFIEN+44VDDke7edVjSey7PqbtEE
eqfU5dhtldhf6F1sBx0I+6brILEpeFO016B1AgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUf9+H/8kha19qfyTLoroOOcxQ5NgwHwYDVR0jBBgwFoAUxlv1e9ybW+fZfg1l
qkIise+qvqowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEz
L3hsdjFlOXliVy1mWmZnMWxxa0lpc2UtcXZxby5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAveGx2MWU5eWJXLWZaZmcxbHFrSWlzZS1xdnFvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEzL2Y5LUhfOGtoYTE5cWZ5
VExvcm9PT2N4UTVOZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJl6CwwDQYJKoZIhvcNAQELBQADggEBAGKAXRr9UCMY5Tkk/Rw5EiGBW5LVU1gk
yXk8qpIlN8ftr3bxurhoGIIPfRzzrisHajFNNvgryyPBlLk+YNw7lil5twAFfn45
kGnBqpq3/Vgo+n0ezf/4Siwrs6xptKsm7a6bqiCHEBHMRDlFnQAd54nr7beMs7f4
bSJI5sQNFKyYfIdaq/n6NkPI8PR7Rrpi0mLU9qygs+E9mnkgm5FIqtf7RsgKcc+I
/Q2onY5+MDUXV791hP0tYkD1qlVJ3cARLx6m4lg/9aSUmovEgNl+LZuj8fQmeCpT
n5sYoTpfxrSJXJuYZbFShDe7YCDSuRlMXBMU+TTNBIpx2lRFX444YiA=
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:14:27 2025 by rpki-client